#26008 [Fbk->Csd]: mail() crashes apache with some parameters
| From: | rich at tallman dot org | Date: | Tue, 28 Oct 2003 02:56:29 +0000 |
| Subject: | #26008 [Fbk->Csd]: mail() crashes apache with some parameters | ||
| References: | 1 | Groups: | php.bugs |
| Request: | Send a blank email to php-bugs+get-49547@lists.php.net to get a copy of this message | ||
ID: 26008
User updated by: rich at tallman dot org
Reported By: rich at tallman dot org
-Status: Feedback
+Status: Closed
Bug Type: Mail related
Operating System: Windows XP
PHP Version: 4.3.3
New Comment:
I *KISS* YOU! All my base are belong to you.
Fixed.
Previous Comments:
------------------------------------------------------------------------
[2003-10-27 17:33:49] iliaa@php.net
Please try using this CVS snapshot:
http://snaps.php.net/php4-STABLE-latest.tar.gz
For Windows:
http://snaps.php.net/win32/php4-win32-STABLE-latest.zip
------------------------------------------------------------------------
[2003-10-27 14:29:29] rich at tallman dot org
More likely cause! -- Emty message parameter may be the cause of the
crash.. the following code does *not* crash apache:
mail("rich@tallman.org","test message"," ","From:
rich@tallman.org\n\nThis is a test message.");
Please note the space in the message field.
------------------------------------------------------------------------
[2003-10-27 14:26:23] rich at tallman dot org
Description:
------------
Any script passing invalid headers will result in a crash of the apache
web server when using the apache module version of php 4.3.3 (from the
binary zip download)
This particular type of invalid header is commonly used to circumvent
other unpredictable strange behaviors with the mail command.
Reproduce code:
---------------
mail("rich@tallman.org","test message","","From:
rich@tallman.org\n\nThis is a test message.");
Expected result:
----------------
Apache will crash (usually creating a windows XP error window)
Actual result:
--------------
szAppName : Apache.exe szAppVer : 2.0.47.0 szModName :
php4ts.dll
szModVer : 4.3.3.3 offset : 0009defe
------------------------------------------------------------------------
--
Edit this bug report at http://bugs.php.net/?id=26008&edit=1